/* * Copyright (C) 2004-2014 L2J Server * * This file is part of L2J Server. * * L2J Server is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * L2J Server is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ package com.l2jserver.loginserver.network.clientpackets; import java.net.InetAddress; import java.security.GeneralSecurityException; import java.util.logging.Level; import java.util.logging.Logger; import javax.crypto.Cipher; import com.l2jserver.Config; import com.l2jserver.loginserver.GameServerTable.GameServerInfo; import com.l2jserver.loginserver.LoginController; import com.l2jserver.loginserver.LoginController.AuthLoginResult; import com.l2jserver.loginserver.model.data.AccountInfo; import com.l2jserver.loginserver.network.L2LoginClient; import com.l2jserver.loginserver.network.L2LoginClient.LoginClientState; import com.l2jserver.loginserver.network.serverpackets.AccountKicked; import com.l2jserver.loginserver.network.serverpackets.AccountKicked.AccountKickedReason; import com.l2jserver.loginserver.network.serverpackets.LoginFail.LoginFailReason; import com.l2jserver.loginserver.network.serverpackets.LoginOk; import com.l2jserver.loginserver.network.serverpackets.ServerList; /** * <pre> * Format: x * 0 (a leading null) * x: the rsa encrypted block with the login an password. * * <pre> */ public class RequestAuthLogin extends L2LoginClientPacket { private static Logger _log = Logger.getLogger(RequestAuthLogin.class.getName()); private final byte[] _raw1 = new byte[128]; private final byte[] _raw2 = new byte[128]; private String _user; private String _password; private int _ncotp; /** * @return */ public String getPassword() { return _password; } /** * @return */ public String getUser() { return _user; } public int getOneTimePassword() { return _ncotp; } @Override public boolean readImpl() { if (super._buf.remaining() >= 128) { readB(_raw1); readB(_raw2); return true; } return false; } @Override public void run() { byte[] decrypted1 = null; byte[] decrypted2 = null; final L2LoginClient client = getClient(); try { final Cipher rsaCipher = Cipher.getInstance("RSA/ECB/nopadding"); rsaCipher.init(Cipher.DECRYPT_MODE, client.getRSAPrivateKey()); int rawMaxLength1 = _raw1.length; decrypted1 = rsaCipher.doFinal(_raw1, 0x00, rawMaxLength1); int rawMaxLength2 = _raw2.length; decrypted2 = rsaCipher.doFinal(_raw2, 0x00, rawMaxLength2); } catch (GeneralSecurityException e) { _log.log(Level.INFO, "", e); return; } try { _user = new String(decrypted1, 0x4E, 14).trim().toLowerCase(); _password = new String(decrypted2, 0x5C, 16).trim(); _ncotp = decrypted1[0x7c]; _ncotp |= decrypted1[0x7d] << 8; _ncotp |= decrypted1[0x7e] << 16; _ncotp |= decrypted1[0x7f] << 24; } catch (Exception e) { _log.log(Level.WARNING, "", e); return; } InetAddress clientAddr = getClient().getConnection().getInetAddress(); final LoginController lc = LoginController.getInstance(); AccountInfo info = lc.retriveAccountInfo(clientAddr, _user, _password); if (info == null) { // user or pass wrong client.close(LoginFailReason.REASON_USER_OR_PASS_WRONG); return; } AuthLoginResult result = lc.tryCheckinAccount(client, clientAddr, info); switch (result) { case AUTH_SUCCESS: client.setAccount(info.getLogin()); client.setState(LoginClientState.AUTHED_LOGIN); client.setSessionKey(lc.assignSessionKeyToClient(info.getLogin(), client)); lc.getCharactersOnAccount(info.getLogin()); if (Config.SHOW_LICENCE) { client.sendPacket(new LoginOk(getClient().getSessionKey())); } else { getClient().sendPacket(new ServerList(getClient())); } break; case INVALID_PASSWORD: client.close(LoginFailReason.REASON_USER_OR_PASS_WRONG); break; case ACCOUNT_BANNED: client.close(new AccountKicked(AccountKickedReason.REASON_PERMANENTLY_BANNED)); return; case ALREADY_ON_LS: L2LoginClient oldClient; if ((oldClient = lc.getAuthedClient(info.getLogin())) != null) { // kick the other client oldClient.close(LoginFailReason.REASON_ACCOUNT_IN_USE); lc.removeAuthedLoginClient(info.getLogin()); } // kick also current client client.close(LoginFailReason.REASON_ACCOUNT_IN_USE); break; case ALREADY_ON_GS: GameServerInfo gsi; if ((gsi = lc.getAccountOnGameServer(info.getLogin())) != null) { client.close(LoginFailReason.REASON_ACCOUNT_IN_USE); // kick from there if (gsi.isAuthed()) { gsi.getGameServerThread().kickPlayer(info.getLogin()); } } break; } } }